Behavioral task
behavioral1
Sample
bad74a4db44d89867702005c10f94451.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bad74a4db44d89867702005c10f94451.exe
Resource
win10v2004-20240226-en
General
-
Target
bad74a4db44d89867702005c10f94451
-
Size
2.7MB
-
MD5
bad74a4db44d89867702005c10f94451
-
SHA1
3a157cc4d90d9691d9411ed7a80c81cf1aa6d5ba
-
SHA256
3b17b802eff4eb86d6e96b36a1093a297a20faebaa1de5c125a74a9287e195c1
-
SHA512
25a4beddaeb8fd3f9a770cd614b359d58e0834089f513453cff80917673e2a53c95d4945eb69ce7f72af8cce53d7d21947bc314c7dcd61bbf557e832fe3798f7
-
SSDEEP
49152:Z18E9DGC7JpUJ2J4QJDWTaNrw0zCeABVPysErafwYO:Z18CDlFWAPJDWT8kAArPysGCxO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bad74a4db44d89867702005c10f94451
Files
-
bad74a4db44d89867702005c10f94451.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE